[arch-general] bad login attempts not written to /var/log/btmp

Simon Perry arch at sanxion.net
Wed Jul 27 10:21:28 EDT 2011


On 27/07/11, Renato wrote:

| sorry, I think I don't understand what you're saying, maybe my english
| isn't very good. the files /var/log/wtmp and /var/log/btmp are indeed
| present in my system

Make sure:

- Your files are 600 and are owned by root:root
- You run 'lastb' with sudo or as root
- The place where /var/log is mounted is rw by root
- agetty is running as root
- sshd is running as root

That's all I have to offer.

If these things are ok, you should be ok.

-- 
Simon Perry (aka Pezz)



More information about the arch-general mailing list